Incident Response Lead

🕒 July 7

🌐 United States, Canada – Remote

🇺🇸 United States – Remote 🇨🇦 Canada – Remote

⏰ Full Time

🟠 Senior

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 34%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Cowbell

WebsiteLinkedInAll Job Openings

201 - 500 employees

🛡️ Insurance

🔒 Cybersecurity

Insurance • Cybersecurity

Cowbell is the leading provider of cyber insurance for small and medium-sized enterprises (SMEs) and the pioneer of Adaptive Cyber Insurance. Cowbell delivers standalone cyber coverage tailored to the unique needs of each business. Their innovative approach relies on AI for continuous risk assessment and continuous underwriting while delivering policyholders a closed-loop approach to risk management with risk prevention, risk mitigation, incident preparedness, and response services.

📋 Description

• Lead and manage all phases of the incident response lifecycle, including scoping, containment, eradication, and recovery, across moderately complex, multi-system environments • Serve as the primary point of contact for Cowbell's Claims Team, breach counsel, Incident Response providers, and policyholders during active engagements • Oversee digital forensics and incident response providers to ensure timely and accurate analysis • Identify and manage scope creep across concurrent engagements while maintaining project timelines and stakeholder alignment • Schedule, organize, and moderate briefings of complex forensic findings into clear, actionable reports for technical, legal, and executive audiences • Handle sensitive investigation materials appropriately under Attorney-Client Privilege and Work Product Doctrine in coordination with legal counsel • Collaborate with claims adjusters, underwriters, and external partners to support incident documentation and coverage determinations • Improve Cowbell Resiliency Service's incident response methodologies, playbooks, and tooling

🎯 Requirements

• 4–6 years of hands-on DFIR experience • Meaningful exposure to the cyber insurance ecosystem, including work with or on behalf of insurance carriers, breach counsel, and/or policyholders • Experience managing scoping, containment, eradication, and recovery phases of cyber incidents • Experience leading moderately complex, multi-system incident investigations • Strong project management skills and ability to identify and control scope creep • Understanding of Attorney-Client Privilege and Work Product Doctrine • Strong consulting and communication skills • Experience presenting forensic findings to legal, technical, and executive stakeholders • A bachelor's degree in Cybersecurity, Information Security Management, Digital Forensics, Computer Science, or a related field is preferred • In lieu of a degree, equivalent professional experience combined with one or more of the following certifications will be considered: GCIH, GNFA, CompTIA CySA+, CISM, or CISSP • Must be eligible to work in the United States (Cowbell is an E-Verify employer)

🏖️ Benefits

• Competitive compensation • Comprehensive benefits • Continuous opportunities for professional development